Cyber Resilience

CVE-2023-4811

Iptanus Wordpress File Upload ≤ 4.23.3

Public PoC
Published
16 October 2023
Modified
23 April 2025
CVSS Score v3.1 5.4
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score 0.0039 32th percentile
Risk Priority 41 floored blend · peak EPSS

Summary

CVE-2023-4811 is a medium-severity an unspecified weakness vulnerability in Iptanus Wordpress File Upload. Its CVSS base score is 5.4 (Medium).

Operationally, ranked at the 32th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

The WordPress File Upload WordPress plugin before 4.23.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks.

CWE(s)
None listed

Related Threats

CVEs Like This One

CVE-2024-39639Same product: Iptanus Wordpress File Upload
CVE-2024-9047Same product: Iptanus Wordpress File Upload
CVE-2024-6494Same product: Iptanus Wordpress File Upload
CVE-2024-2847Same product: Iptanus Wordpress File Upload
CVE-2024-13494Same product: Iptanus Wordpress File Upload
CVE-2024-5852Same product: Iptanus Wordpress File Upload
CVE-2024-9939Same product: Iptanus Wordpress File Upload
CVE-2024-12719Same product: Iptanus Wordpress File Upload
CVE-2024-7301Same product: Iptanus Wordpress File Upload
CVE-2024-11613Same product: Iptanus Wordpress File Upload

Affected Assets

iptanus
wordpress file upload
≤ 4.23.3

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References